Red Hat Security AdvisoryRHSA-2021:4358
glibc security, bug fix, and enhancement update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) glibc-benchtests-2.28-164.el8, glibc-nss-devel-2.28-164.el8, glibc-static-2.28-164.el8 +1
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-164.el8, glibc-utils-2.28-164.el8
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-164.el8, glibc-all-langpacks-2.28-164.el8, glibc-common-2.28-164.el8 +47
Fixes 3 records
Priority MEDIUM 50
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02753 · Published 2021-07-22 · Partial fix CWE-704
Priority MEDIUM 48
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03522 · Published 2021-05-25 · Partial fix CWE-416
Priority LOW 13
The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service o…
CVSS 3.1LOW 2.5· Local · Low privileges · No interaction · EPSS 0.00385 · Published 2021-02-24 · Fixed CWE-415
